| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757718243.M519597P3666.host100322.itwesthosting.com,S=7978,W=8137:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id ZzTEHuOmxGhSDgAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sat, 13 Sep 2025 01:04:03 +0200
Return-path: <>
Envelope-to: ivica.benutic@h1telekom.hr
Delivery-date: Sat, 13 Sep 2025 01:04:03 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxCoF-0000x2-1Q
for ivica.benutic@h1telekom.hr;
Sat, 13 Sep 2025 01:04:03 +0200
X-Failed-Recipients: ivica.benutic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: ivica.benutic@h1telekom.hr
References: <20250907185938.3298@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757718243-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxCoF-0000x2-1Q@host100322.itwesthosting.com>
Date: Sat, 13 Sep 2025 01:04:03 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757718243-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
ivica.benutic@h1telekom.hr
--1757718243-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;ivica.benutic@h1telekom.hr
Status: 5.0.0
--1757718243-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <ivica.benutic@h1telekom.hr>
Received: from [23.177.184.230] (port=51916 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <ivica.benutic@h1telekom.hr>)
id 1uvOMF-00079z-19
for ivica.benutic@h1telekom.hr;
Mon, 08 Sep 2025 00:59:39 +0200
Received: from your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id 396953FDDF
for <ivica.benutic@h1telekom.hr>; Sun, 7 Sep 2025 18:59:38 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============5055494432011323676=="
MIME-Version: 1.0
From: ivica.benutic@h1telekom.hr <ivica.benutic@h1telekom.hr>
To: ivica.benutic@h1telekom.hr
Reply-To: ivica.benutic@h1telekom.hr
Message-ID: <20250907185938.3298@h1telekom.hr>
Date: Sun, 07 Sep 2025 18:59:38
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ivica.benutic@h1telekom.hr I will be direct You watch adult
content often, and I caught you masturbating. We all do it from time to time.
How I did this Your router was vulnerable. I was able to injec [...]
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** i have very badnews for you.
--===============5055494432011323676==
Content-Type: multipart/alternative; boundary="===============6957842511926060302=="
MIME-Version: 1.0
--===============6957842511926060302==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============6957842511926060302==--
--===============5055494432011323676==--
--1757718243-eximdsn-1804289383--